{
  lib,
  my-lib,
  config,
  ...
}: let
  inherit (lib) mkOption mkEnableOption;
  inherit (my-lib.netTypes {inherit lib;}) ipAddr ipAddrCidr;
  inherit (my-lib.options {inherit lib config;}) mkThemeOption;
in {
  options.collinux.system = {
    boot = {
      systemd-boot.enable = mkOption {
        description = "Whether to use systemd-boot on this system";
        default = true;
      };
      timeout = mkOption {
        description = "bootloader timeout";
        type = lib.types.int;
        default = 0;
      };
      plymouth = {
        enable = mkEnableOption "plymouth bootsplash";
        theme = mkThemeOption "plymouth";
      };
      secureBoot.enable = mkEnableOption "lanzaboote";
    };

    network = {
      iwd.enable = mkEnableOption "lightweight wifi daemon";
      networkmanager.enable = mkEnableOption "heavier wifi daemon";
      networkd = {
        enable = mkEnableOption "use systemd-networkd";
        ssid = mkOption {
          description = "SSID for this network";
          type = lib.types.str;
        };
        pskFile = mkOption {
          description = "Absolute path to a file containing the pre-shared key for this network in the form `psk:<wifi psk>`";
          type = lib.types.str;
          example = "/run/secrets.d/wifi-psk";
        };

        static = lib.mkOption {
          description = "Set a static IP address for this device on this network. Leave unset to use DHCP";
          type = lib.types.nullOr (lib.types.submodule {
            options = {
              ip = mkOption {
                description = "IP address";
                type = ipAddrCidr;
              };
              gateway = mkOption {
                description = "default gateway";
                type = ipAddr;
              };
            };
          });
          default = null;
        };
      };

      tailscale.enable = mkEnableOption "tailscale";
    };

    audio.enable = mkEnableOption "pipewire and wireplumber";
    bluetooth.enable = mkEnableOption "bluetooth";
  };
}